Privacy at Scale: Local Differential Privacy in Practice